forked from 0x2620/pandora
item owner can see all data
This commit is contained in:
parent
b299b4b7e8
commit
896df71942
1 changed files with 2 additions and 0 deletions
|
@ -478,6 +478,8 @@ def get(request):
|
|||
level = 'guest'
|
||||
else:
|
||||
level = request.user.get_profile().get_level()
|
||||
if request.user == item.user:
|
||||
return True
|
||||
return level in settings.CONFIG['capabilities'][capability] \
|
||||
and settings.CONFIG['capabilities'][capability][level]
|
||||
for k in settings.CONFIG['itemKeys']:
|
||||
|
|
Loading…
Reference in a new issue